Lucene search
IBMEA761316E0CACA4ECA2D357E4634CEAFC485C927C93D4C163A331B9933CA2207HistoryJul 23, 2021 - 3:25 p.m.
Security Bulletin: IBM i2 Analyst's Notebook Premium has an information disclosure vulnerability (CVE-2021-29784)
2021-07-2315:25:17
www.ibm.com
12
0.001 Low
EPSS
Percentile
33.0%
Summary
More information than is necessary is sometimes displayed in i2 Analyst’s Notebook Premium error dialogs.
Vulnerability Details
CVEID:CVE-2021-29784
**DESCRIPTION:**IBM i2 Analyze could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/203168 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM i2 Analyze | IBM i2 Analyze 4.3.1 |
| IBM i2 Analyze | IBM i2 Analyze 4.3.0 |
| IBM i2 Analyze | IBM i2 Analyze 4.3.2 |
Remediation/Fixes
Please visit you IBM customer portal to apply the IBM i2 Analyst’s Notebook Premium 9.2.4 continuous delivery update
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| i2 analyze | eq | 2.4 |
Related
cvelist
cvelist
CVE-2021-29784
2021-07-23 00:00:00
cve
cve
CVE-2021-29784
2021-07-26 12:15:08
prion
prion
Information disclosure
2021-07-26 12:15:00
cnvd
cnvd
IBM i2 Analyze Information Disclosure Vulnerability
2021-07-27 00:00:00
nvd
nvd
CVE-2021-29784
2021-07-26 12:15:08
0.001 Low
EPSS
Percentile
33.0%
Related for EA761316E0CACA4ECA2D357E4634CEAFC485C927C93D4C163A331B9933CA2207